Security update for shim SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1564-1 Final 1 1 2021-05-11T11:30:04Z current 2021-05-11T11:30:04Z 2021-05-11T11:30:04Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for shim This update for shim fixes the following issues: - Update to the unified shim binary for SBAT support (bsc#1182057) + Merged EKU codesign check (bsc#1177315) - shim-install: Always assume 'removable' for Azure to avoid the endless reset loop (bsc#1185464). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP1-CHOST-BYOS-Azure-2021-1564,Image SLES15-SP1-CHOST-BYOS-EC2-2021-1564,Image SLES15-SP1-CHOST-BYOS-GCE-2021-1564,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2021-1564,Image SLES15-SP1-EC2-HVM-BYOS-2021-1564,Image SLES15-SP1-GCE-BYOS-2021-1564,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2021-1564,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2021-1564,Image SLES15-SP1-SAP-EC2-HVM-2021-1564,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2021-1564,Image SLES15-SP1-SAP-GCE-2021-1564,Image SLES15-SP1-SAP-GCE-BYOS-2021-1564,Image SLES15-SP1-SAPCAL-Azure-2021-1564,Image SLES15-SP1-SAPCAL-EC2-HVM-2021-1564,Image SLES15-SP1-SAPCAL-GCE-2021-1564,Image SLES15-SP2-Azure-Basic-2021-1564,Image SLES15-SP2-Azure-Standard-2021-1564,Image SLES15-SP2-BYOS-Azure-2021-1564,Image SLES15-SP2-BYOS-EC2-HVM-2021-1564,Image SLES15-SP2-BYOS-GCE-2021-1564,Image SLES15-SP2-CHOST-BYOS-Azure-2021-1564,Image SLES15-SP2-CHOST-BYOS-EC2-2021-1564,Image SLES15-SP2-CHOST-BYOS-GCE-2021-1564,Image SLES15-SP2-GCE-2021-1564,Image SLES15-SP2-HPC-Azure-2021-1564,Image SLES15-SP2-HPC-BYOS-Azure-2021-1564,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2021-1564,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2021-1564,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2021-1564,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2021-1564,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2021-1564,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2021-1564,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2021-1564,Image SLES15-SP2-SAP-Azure-2021-1564,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2021-1564,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2021-1564,Image SLES15-SP2-SAP-BYOS-Azure-2021-1564,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2021-1564,Image SLES15-SP2-SAP-BYOS-GCE-2021-1564,Image SLES15-SP2-SAP-EC2-HVM-2021-1564,Image SLES15-SP2-SAP-GCE-2021-1564,SUSE-2021-1564,SUSE-SLE-Module-Basesystem-15-SP2-2021-1564,SUSE-SLE-Product-HPC-15-SP1-ESPOS-2021-1564,SUSE-SLE-Product-HPC-15-SP1-LTSS-2021-1564,SUSE-SLE-Product-SLES-15-SP1-BCL-2021-1564,SUSE-SLE-Product-SLES-15-SP1-LTSS-2021-1564,SUSE-SLE-Product-SLES_SAP-15-SP1-2021-1564,SUSE-SLE-Product-SUSE-Manager-Proxy-4.0-2021-1564,SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.0-2021-1564,SUSE-SLE-Product-SUSE-Manager-Server-4.0-2021-1564,SUSE-SUSE-MicroOS-5.0-2021-1564,SUSE-Storage-6-2021-1564 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211564-1/ Link for SUSE-SU-2021:1564-1 https://lists.suse.com/pipermail/sle-security-updates/2021-May/008758.html E-Mail link for SUSE-SU-2021:1564-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1177315 SUSE Bug 1177315 https://bugzilla.suse.com/1182057 SUSE Bug 1182057 https://bugzilla.suse.com/1185464 SUSE Bug 1185464 Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 shim-15.4-3.20.1 shim-15.4-3.20.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 shim-15.4-3.20.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS shim-15.4-3.20.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS shim-15.4-3.20.1 as a component of Image SLES15-SP1-GCE-BYOS shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAP-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAP-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAPCAL-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP1-SAPCAL-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-Azure-Basic shim-15.4-3.20.1 as a component of Image SLES15-SP2-Azure-Standard shim-15.4-3.20.1 as a component of Image SLES15-SP2-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP2-BYOS-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 shim-15.4-3.20.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-HPC-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-EC2-HVM shim-15.4-3.20.1 as a component of Image SLES15-SP2-SAP-GCE shim-15.4-3.20.1 as a component of SUSE Enterprise Storage 6 shim-15.4-3.20.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS shim-15.4-3.20.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS shim-15.4-3.20.1 as a component of SUSE Linux Enterprise Micro 5.0 shim-15.4-3.20.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 shim-15.4-3.20.1 as a component of SUSE Linux Enterprise Server 15 SP1-BCL shim-15.4-3.20.1 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS shim-15.4-3.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 shim-15.4-3.20.1 as a component of SUSE Manager Proxy 4.0 shim-15.4-3.20.1 as a component of SUSE Manager Retail Branch Server 4.0 shim-15.4-3.20.1 as a component of SUSE Manager Server 4.0